Adding google fonts (fonts.googleapis.com) to CSP header
问题 I am hosting a personal project on gitHub pages, and using cloudflare to enforce https. Now I would like to implement a CSP policy. I tried adding meta tag to the head of my page: <meta HTTP-EQUIV='Content-Security-Policy' CONTENT="default-src 'self' *.fonts.googleapis.com/* *.cloudflare.com/* *.fonts.googleapis.com/*;"> But I am getting the following error: Refused to load the stylesheet 'https://fonts.googleapis.com/icon?family=Material+Icons' because it violates the following Content